More detailed HPKP advice is in HPKP best practices if you choose to implement, which I helped edit.
LEAX1 and LEAX2 will always have the same keys. In the future we may generate new intermediates with new keys, and sign from those.
jsha
9
Related topics
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| Public Key Changed? | 26 | 3833 | January 14, 2021 | |
| Key rotation at reissuance | 2 | 3415 | December 10, 2015 | |
| iOS Public Key Pinning Question | 2 | 4927 | July 13, 2016 | |
|
SSL is broken - the backdoor is built in
|
7 | 8340 | September 15, 2015 | |
| Certificate failure due to X3 to R3 intermediate certification transition | 24 | 3001 | January 27, 2021 |